GE T35 UR Series Instruction Manual page 139

5 SETTINGS
The Supervisory menu settings are available for Supervisor role only or if the Supervisor role is disabled then for the
Administrator role only.
Local Authentication: This setting is enabled by default, meaning "Yes" is selected. When enabled, Device Authentication
with roles is enabled. When this setting is disabled, the UR only authenticates to the AAA server (Radius). However, the
Administrator and Supervisor (when enabled) remain active even after device authentication is disabled and their only per-
mission is to re-enable device authentication. To re-enable device authentication, the Supervisor unlocks the device for set-
ting changes, then the Administrator re-enables device authentication.
Bypass Access: Enabling this setting allows 502 Ethernet sessions to the relay. The serial ports (RS232 and RS485) allow
settings write. No passwords or roles are required when in this mode. When disabled, everything goes back to normal. This
setting has no effect on the front panel and it continues to support Role Based Access Control (RBAC).
MODE SERIAL (RS232 & RS485)
Bypass Access = Disabled Local Authentication
and Role Based Access
Control (RBAC)
and passwords in clear
Bypass Access = Enabled No Role Based Access Control
(RBAC)
and no passwords
Lock Relay: This setting uses a Boolean value (Enable/Disable) to indicate if the device accepts setting changes and
whether the device can receive a firmware upgrade. This setting can be changed only by the Supervisor role, if it is enabled
or by the Administrator if the Supervisor role is disabled. The Supervisor role enables this setting for the relay to start
accepting setting changes or command changes or firmware upgrade. After all the setting changes are applied or com-
mands executed, the Supervisor disables to lock setting changes.
Example: If this setting is "Yes" and an attempt is made to change settings or upgrade the firmware, the UR device denies
the setting changes and denies upgrading the firmware. If this setting is "No", the UR device accepts setting changes and
firmware upgrade.
This role is disabled by default.
GE Multilin
Figure 5–2: SUPERVISORY PANEL
502 ETHERNET
Read only
No Role Based Access
Control (RBAC)
and no passwords
T35 Transformer Protection System
5.2 PRODUCT SETUP
SSH ETHERNET
Local/Remote Authentication
and Role Based Access Control (RBAC)
and passwords encrypted
Local/Remote Authentication
and Role Based Access Control (RBAC)
and passwords encrypted
5
5-17